Amidst the Russian invasion, Ukraine’s also fighting cyberattacks — here’s what you need to know

Critical websites of the country are being targeted

Cyberattacks

Yesterday, the State Service for Special Communications and Information Protection of Ukrainesaidseveral government websites were under a DDoS (Distributed Denial of Service) attack. As such, users wouldn’t be able to access these critical sites in the midst of this crisis.

Today,the authority said, “phishing attacks on public authorities and critical infrastructure, the spread of malicious software, as well as attempts to penetrate private and public sector networks and further destructive actions have intensified.”

It has advised citizens to back up critical information, and isolate workstations that are not important at the moment.

Later in the night, researchers from security firmESETsaid thousands of computers in Ukraine were under a malware attack. They found that this data wiper malware was aimed at corrupting data and taking over servers. Currently, this attack is not being attributed to a particular threat actor.

Netblocks, an agency tracking internet disruptions all over the world, noted this morning that internet services were disrupted in Kharkiv, Ukraine’s second-biggest city, after Russian forces attacked it early today. It isn’t clear if the infrastructure was damaged by shelling. The tweet describes this as happening after explosions were heard in the city.

Infrastructure company Cloudflare noted that it had seen a small uptick in cyberattacks against Ukrainian government websites, and it’s actively keeping an eye on the situation in the country.

Misinformation and Telegram’s role in it

Telegram is one ofthe most popular communication channelsinRussia and Ukraine. As Jordan Wildon, a misinformation researcher noted, that app could bea key source of informationto people in that region.

One of the examples is Ukrainian President Volodymyr Zelensky’s recent address to the people of Russian through Telegram. As MSNBC reporterCal Perrynoted, he used the app to broadcast his message, because Russian media might not air his address — given the state hastight control over press information. After Russia began its attack, the country’s press watchdog,Roskomnadzor, indicatedlocal media to use only state verified information.

While a lot ofUkrainian officialsand news channels are present on Telegram, the platform is alsorife with misinformation.

Freelance reporterJustin Lingtweeted that several pro-Kremlin channels are justifying Russia’s invasion as steps to “denazify Ukraine.” This statement doesn’t make sense, as Ukraine is led bya Jewish non-nazi president.

Last week,Eliot Higgins, founder of Bellingcat, an Amsterdam-based investigative outlet, dissected a false video circulated on Telegram that showed “Polish speaking saboteurs” attempting to blow up a storage tank in Gorlovka.

On February 18, a pro-Russian separatist leader published a clip on his Telegram channel “ordering emergency evacuations” from eastern Ukraine to Russia. However,Bellingcatfound from the metadata that the video was created two days prior.

Notably, false information is not limited to Telegram. Outlets frombothcountriesare freely tweeting doctored info masquerading as news, and that could lead to confusion regarding the situation.

What happens next?

In a tense situation like this, the internet plays a key role for people in affected countries to get reliable information from verified sources about what’s happening to them and around them. Internet shutdowns or service breakdowns in those regions could have devastating effects.

In a story last week,the New York Timespointed out that some of Ukraine’s internet services were being partially disrupted.

Experts noted that Russia could target the country’s telecommunication services to create an information blackout. However, given that Ukraine has more than 2,000 internet service providers, it could be a difficult task.

On the other hand, Russia could face tech challenges in the coming days, as the US is pondering new restrictions on the country.

Reutersreported that as a part of these sanctions, it could prohibit US-based companies from providing services to Russia. That could halt sales of future devices and cloud services that are critical for tech infrastructure.

We’ll update this story as the situation develops.

Story byIvan Mehta

Ivan covers Big Tech, India, policy, AI, security, platforms, and apps for TNW. That’s one heck of a mixed bag. He likes to say “Bleh.“Ivan covers Big Tech, India, policy, AI, security, platforms, and apps for TNW. That’s one heck of a mixed bag. He likes to say “Bleh.”

Get the TNW newsletter

Get the most important tech news in your inbox each week.

More TNW

About TNW

Who is Lapsus$, the theatrical cyber gang that attacked Okta, Samsung, and Microsoft?

Protect biomedical data from hackers by treating the problem like a game

Discover TNW All Access

Pegasus isn’t all you have to worry about: Meet Cytrox’s spyware, Predator

The next big cybersecurity threat is connected SaaS platforms